SELinux userspace release 3.6
RELEASE 3.6
User-visible changes
-
checkpolicy/dispol: add option to display users, drop duplicate option to display booleans,
show number of entries before listing them -
libsepol: struct cond_expr_t
bool
renamed toboolean
The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro -
cil: Allow IP address and mask values to be directly written
-
cil: Allow paths in filecon rules to be passed as arguments
-
Add not self support for neverallow rules
-
dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies
-
Improve man pages
-
libselinux: performance optimization for duplicate detection
-
dismod: add options: --actions ACTIONS, --help
-
dispol: add options: --actions ACTIONS, --help
-
checkpolicy: Add the command line argument -N, --disable-neverallow
-
Introduce getpolicyload - a helper binary to print the number of policy reloads on the running system
-
man pages: Remove the Russian translations
-
Add notself and other support to CIL
-
Add support for deny rules
-
Translations updated from
https://translate.fedoraproject.org/projects/selinux/ -
Bug fixes
Development-relevant changes
-
ci: bump Fedora to version 39
-
Drop LGTM.com and Travis CI configuration